CVE-2008-0928

Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.

Link	Resource
http://marc.info/?l=debian-security&m=120343592917055&w=2
https://bugzilla.redhat.com/show_bug.cgi?id=433560
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00900.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00957.html
http://secunia.com/advisories/29172	Vendor Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00852.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00857.html
http://secunia.com/advisories/29081
http://www.redhat.com/support/errata/RHSA-2008-0194.html
http://secunia.com/advisories/29963
http://www.mandriva.com/security/advisories?name=MDVSA-2008:162
http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00850.html
http://www.securityfocus.com/bid/28001
http://secunia.com/advisories/29136
http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00830.html
http://secunia.com/advisories/29129
http://www.mandriva.com/security/advisories?name=MDVSA-2009:016
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
http://secunia.com/advisories/34642
http://www.debian.org/security/2009/dsa-1799
http://secunia.com/advisories/35031
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9706

Configuration 1

cpe:2.3:a:qemu:qemu:0.1.6:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.5.3:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.4.2:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.1.5:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.5.1:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.8.2:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.5.5:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.9.0:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.7.2:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.1.3:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.7.1:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.5.0:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.8.1:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.4.1:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.5.2:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.1.1:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.7.0:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.1.4:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.9.1:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.6.0:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.6.1:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.4.3:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.1.2:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.5.4:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.8.0:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.1.0:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.2.0:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.3.0:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:0.4.0:*:*:*:*:*:*:*

---

Published : 2008-03-03 10:44

Updated : 2020-11-02 02:39

---

NVD link : CVE-2008-0928

Mitre link : CVE-2008-0928

No products.

CWE-264